In the attached diff from pkocvara seems to be a bug, when setting only the NTLM trusted-uris nothing happens. In the diff, change
'+If FirefoxTrustedAuthKey <> "" or FirefoxDelegatedNtlmAuthKey <>...' to
'+If FirefoxTrustedAuthKey <> "" or FirefoxTrustedNtlmAuthKey <>...'